diff options
author | Stephen Gallagher <sgallagh@redhat.com> | 2010-05-06 10:09:41 -0400 |
---|---|---|
committer | Stephen Gallagher <sgallagh@redhat.com> | 2010-05-27 14:44:14 -0400 |
commit | 35480afaefafb77b28d35b29039989ab888aafe9 (patch) | |
tree | 60789844987297b64c9dc237bdd4501e4b5df86f /src/providers/ldap/sdap_access.h | |
parent | 8bb6aa3fd81a3c195b92270ddf189296abae65eb (diff) | |
download | sssd-35480afaefafb77b28d35b29039989ab888aafe9.tar.gz sssd-35480afaefafb77b28d35b29039989ab888aafe9.tar.xz sssd-35480afaefafb77b28d35b29039989ab888aafe9.zip |
Add ldap_access_filter option
This option (applicable to access_provider=ldap) allows the admin
to set an additional LDAP search filter that must match in order
for a user to be granted access to the system.
Common examples for this would be limiting access to users by in a
particular group, for example:
ldap_access_filter = memberOf=cn=access_group,ou=Groups,dc=example,dc=com
Diffstat (limited to 'src/providers/ldap/sdap_access.h')
-rw-r--r-- | src/providers/ldap/sdap_access.h | 39 |
1 files changed, 39 insertions, 0 deletions
diff --git a/src/providers/ldap/sdap_access.h b/src/providers/ldap/sdap_access.h new file mode 100644 index 000000000..5dbe86461 --- /dev/null +++ b/src/providers/ldap/sdap_access.h @@ -0,0 +1,39 @@ +/* + SSSD + + sdap_access.h + + Authors: + Stephen Gallagher <sgallagh@redhat.com> + + Copyright (C) 2010 Red Hat + + This program is free software; you can redistribute it and/or modify + it under the terms of the GNU General Public License as published by + the Free Software Foundation; either version 3 of the License, or + (at your option) any later version. + + This program is distributed in the hope that it will be useful, + but WITHOUT ANY WARRANTY; without even the implied warranty of + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + GNU General Public License for more details. + + You should have received a copy of the GNU General Public License + along with this program. If not, see <http://www.gnu.org/licenses/>. +*/ + +#ifndef SDAP_ACCESS_H_ +#define SDAP_ACCESS_H_ + +#include "providers/dp_backend.h" + +#define SYSDB_LDAP_ACCESS "ldap_access_allow" + +struct sdap_access_ctx { + struct sdap_id_ctx *id_ctx; + const char *filter; +}; + +void ldap_pam_access_handler(struct be_req *breq); + +#endif /* SDAP_ACCESS_H_ */ |